Skip to content
Draft
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 21 additions & 0 deletions .github/scripts/skills-index-allowlist.json
Original file line number Diff line number Diff line change
Expand Up @@ -6,5 +6,26 @@
"pricing.model": "free",
"auth.scope": null
}
},
{
"name": "kwh",
"justification": "KWH issues metering and signed receipts for active agent work (ontology domains/kwh; ruling documents/d-domain-rulings-oct9). Probed 2026-10-09 6:59 PM ET: every /v1/kwh, GET and POST, on gateway.wave.online answers 503 SPOKE_NOT_LIVE, so there is no served operation to document yet. Add real operations when the KWH spoke has a live origin. Honored only while the index carries no meter.",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion: Rewrite this public allowlist justification to describe the unavailable endpoint without disclosing metering or other pricing details.

Severity Level: Major ⚠️ · 🏷️ Custom_rule

Rule source 📖

CodeAnt dashboard (rule "rules-1790440327969-5ltphbdub")

Use CodeAnt Skill Fix in Cursor Fix in VSCode Claude

Prompt for AI Agent 🤖
This is a comment left during a code review.

**Path:** .github/scripts/skills-index-allowlist.json
**Line:** 12:12
**Comment:**
	*Custom Rule: Rewrite this public allowlist justification to describe the unavailable endpoint without disclosing metering or other pricing details.

Validate the correctness of the flagged issue. If correct, How can I resolve this? If you propose a fix, implement it and please make it concise.
Once fix is implemented, also check other comments on the same PR, and ask user if the user wants to fix the rest of the comments as well. if said yes, then fetch all the comments validate the correctness and implement a minimal fix
👍 | 👎

"expect": {
"pricing.meter": null

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: These exemptions persist after KYA/VRFY become live: both are described as free forever, while the only predicate is pricing.meter === null. skills-index-coverage.mjs then skips the uncovered skill indefinitely; expire the exemptions on a live-status change or remove them when those routes ship.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. When an issue isn't valid or won't be fixed in this PR, reply in its thread with the reason and then resolve the thread. At .github/scripts/skills-index-allowlist.json, line 14:

<comment>These exemptions persist after KYA/VRFY become live: both are described as free forever, while the only predicate is `pricing.meter === null`. `skills-index-coverage.mjs` then skips the uncovered skill indefinitely; expire the exemptions on a live-status change or remove them when those routes ship.</comment>

<file context>
@@ -6,5 +6,26 @@
+    "name": "kwh",
+    "justification": "KWH issues metering and signed receipts for active agent work (ontology domains/kwh; ruling documents/d-domain-rulings-oct9). Probed 2026-10-09 6:59 PM ET: every /v1/kwh, GET and POST, on gateway.wave.online answers 503 SPOKE_NOT_LIVE, so there is no served operation to document yet. Add real operations when the KWH spoke has a live origin. Honored only while the index carries no meter.",
+    "expect": {
+      "pricing.meter": null
+    }
+  },
</file context>

}
},
{
"name": "kya",
"justification": "KYA is identity: a public, stranger-checkable agent record, free forever (ontology domains/kya; documents/d-kya-k7-free-with-enterprise). The served free identity op is already documented as identityResolve (/identity/resolve). Probed 2026-10-09 6:59 PM ET: every /v1/kya, GET and POST, on gateway.wave.online answers 503 SPOKE_NOT_LIVE, so there is no served operation to document yet. Honored only while the index carries no meter.",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion: Remove the free-forever claim and plan reference, and explain the exemption using only the endpoint's unavailable status.

Severity Level: Major ⚠️ · 🏷️ Custom_rule

Rule source 📖

CodeAnt dashboard (rule "rules-1790440327969-5ltphbdub")

Use CodeAnt Skill Fix in Cursor Fix in VSCode Claude

Prompt for AI Agent 🤖
This is a comment left during a code review.

**Path:** .github/scripts/skills-index-allowlist.json
**Line:** 19:19
**Comment:**
	*Custom Rule: Remove the free-forever claim and plan reference, and explain the exemption using only the endpoint's unavailable status.

Validate the correctness of the flagged issue. If correct, How can I resolve this? If you propose a fix, implement it and please make it concise.
Once fix is implemented, also check other comments on the same PR, and ask user if the user wants to fix the rest of the comments as well. if said yes, then fetch all the comments validate the correctness and implement a minimal fix
👍 | 👎

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: Remove the free-forever claim and enterprise-plan reference from this public justification; state only that the endpoint is unavailable.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. When an issue isn't valid or won't be fixed in this PR, reply in its thread with the reason and then resolve the thread. At .github/scripts/skills-index-allowlist.json, line 19:

<comment>Remove the free-forever claim and enterprise-plan reference from this public justification; state only that the endpoint is unavailable.</comment>

<file context>
@@ -6,5 +6,26 @@
+  },
+  {
+    "name": "kya",
+    "justification": "KYA is identity: a public, stranger-checkable agent record, free forever (ontology domains/kya; documents/d-kya-k7-free-with-enterprise). The served free identity op is already documented as identityResolve (/identity/resolve). Probed 2026-10-09 6:59 PM ET: every /v1/kya, GET and POST, on gateway.wave.online answers 503 SPOKE_NOT_LIVE, so there is no served operation to document yet. Honored only while the index carries no meter.",
+    "expect": {
+      "pricing.meter": null
</file context>
Suggested change
"justification": "KYA is identity: a public, stranger-checkable agent record, free forever (ontology domains/kya; documents/d-kya-k7-free-with-enterprise). The served free identity op is already documented as identityResolve (/identity/resolve). Probed 2026-10-09 6:59 PM ET: every /v1/kya, GET and POST, on gateway.wave.online answers 503 SPOKE_NOT_LIVE, so there is no served operation to document yet. Honored only while the index carries no meter.",
"justification": "Probed 2026-10-09 6:59 PM ET: every /v1/kya GET and POST request on gateway.wave.online answers 503 SPOKE_NOT_LIVE, so there is no served operation to document yet.",

"expect": {
"pricing.meter": null
}
},
{
"name": "vrfy",
"justification": "VRFY only checks receipts and is free forever, with no persistence (ontology domains/vrfy; Orchestrator ruling Oct 9). It issues nothing, so it has no priced operation. Probed 2026-10-09 6:59 PM ET: every /v1/vrfy, GET and POST, on gateway.wave.online answers 503 SPOKE_NOT_LIVE, so there is no served operation to document yet. Honored only while the index carries no meter.",
"expect": {
"pricing.meter": null
}
Comment on lines +27 to +29

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion: For kya and vrfy, the spokes can become live while pricing.meter stays null, so this predicate keeps bypassing coverage for undocumented operations.

Assessment: 🟠 Major · 🔁 Occurrence: Sometimes · 🏷️ Incorrect condition logic

Use CodeAnt Skill Fix in Cursor Fix in VSCode Claude

Prompt for AI Agent 🤖
This is a comment left during a code review.

**Path:** .github/scripts/skills-index-allowlist.json
**Line:** 27:29
**Comment:**
	*Incorrect Condition Logic: For `kya` and `vrfy`, the spokes can become live while `pricing.meter` stays null, so this predicate keeps bypassing coverage for undocumented operations.

Validate the correctness of the flagged issue. If correct, How can I resolve this? If you propose a fix, implement it and please make it concise.
Once fix is implemented, also check other comments on the same PR, and ask user if the user wants to fix the rest of the comments as well. if said yes, then fetch all the comments validate the correctness and implement a minimal fix
👍 | 👎

}
]
Loading